Please Review Changes to Windows Exports List for krb5 1.2.5 in KfW 2.2 eichin-krb at
Mon Apr 15 17:38:00 EDT 2002

> There's no API to discover x-realm trusts other than just trying to get
> x-realm creds. Just because we're used to having x-realm trusts

Worse yet, the current system (experimentally determined) tries
different paths depending on what cached tgts you have... granted, you
notice [and care] when you have enctype lossage along one path and not
another, but it is at least a weak argument for giving the clients
more control [since the library can't necessarily do the right thing
on its own.]

More information about the krbdev mailing list